Force user to disconnect/Logoff

In an AD environment we need to have a policy on when a user is terminated to immediately have them disconnected and logged off from the network and their computer. I know you can obviously disable the account but that doesnt do any good when their still logged on and they can cause damage.
I need to find a way where I can instantly kick them off.

In my experience if you have an employee that you think may do damage then generally they are told by management and HR and while that is being done all access (login, VPN, building access etc) gets taken away then and they are escorted out.

When people leave with normal two weeks and on pleasant terms those steps are usually not needed